Nec Sv9100 Firmware
6 CVEs affecting Nec Sv9100 Firmware. Latest disclosed: 2020-07-29. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-20027 | Critical | 9.8 | 2020-07-29 | Aspire-derived NEC PBXes, including the SV8100, SV9100, SL1100 and SL2100 with software releases 7.0 or higher contain the possibility if incorrectly configure… |
CVE-2019-20025 | Critical | 9.8 | 2020-07-29 | Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded usernam… |
CVE-2019-20029 | High | 8.8 | 2020-07-29 | An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1… |
CVE-2019-20028 | High | 7.5 | 2020-07-29 | Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access… |
CVE-2019-20026 | High | 7.5 | 2020-07-29 | The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to def… |
CVE-2019-20032 | Medium | 6.5 | 2020-07-29 | An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, S… |